Data retrieval settings for the Microsoft Threat and Vulnerability Management integrations with Security Exposure Management

concept brazil Updated Sep 10, 2026 1 min read mstvm-data-rerieve.md

Raw file servicenow.com

Determine the type and scope of data that you want to import with the integrations with data retrieval settings.

Data retrieval settings help you control the data that you want to import. Set the values of these filters in integration instances. To view the integration instances, navigate to All > Microsoft Defender Integration for USEM > Administration > Integrations.

From the list, select the link in the Source Instance column. The Integration Instance Parameters tab displays a list of parameters. Alternatively, select the Vulnerability Integrations tab for a schedule, REST details, integration details, data sources, and integration run information.

Data retrieval settings and filters for the MS TVM integrations in your ServiceNow AI Platform instance

The following settings are available for the MS TVM integrations in your ServiceNow AI Platform instance. These and other configuration settings are displayed on the Integration Instance page of your ServiceNow AI Platform instance. You may prefer to leave these settings in their default values for the first few integration runs.

vi_size_limit

Number of vulnerable item records to include in the result set from the MS TVM Machine Vulnerabilities integration. This setting must be in the int32 format. The default value is 2,000.
vulnerabilities_size_limit

Number of vulnerability records to include in the result set from the MS TVM Vulnerability (CVE) integration. This setting must be in the int32 format. The default value is 2,000.
recommendations_size_limit

Number of vulnerability records to include in the result set from the MS TVM Recommendations Integration. This setting must be in the int32 format. The default value is 2,000.
asset_size_limit

Number of vulnerability records to include in the result set from the MS TVM Machines integration. This setting must be in the int32 format. The default value is 2,000.
machine_filter

Filters the machines that are coming from MS TVM. This filter is applied to the MS TVM Machines integration. The default value brings in machines where onBoardingStatus is onBoarded.

48 lines · 3.1 KB Wrap lines

---
title: Data retrieval settings for the Microsoft Threat and Vulnerability Management integrations with Security Exposure Management
description: Determine the type and scope of data that you want to import with the integrations with data retrieval settings.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/security-management/vulnerability-response/mstvm-data-rerieve.html
release: brazil
product: Vulnerability Response
classification: vulnerability-response
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Microsoft Threat and Vulnerability Management, Microsoft Defender Integration for Security Exposure Management, Vulnerability Response integrations, Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Data retrieval settings for the Microsoft Threat and Vulnerability Management integrations with Security Exposure Management

Determine the type and scope of data that you want to import with the integrations with data retrieval settings.

Data retrieval settings help you control the data that you want to import. Set the values of these filters in integration instances. To view the integration instances, navigate to **All** &gt; **Microsoft Defender Integration for USEM** &gt; **Administration** &gt; **Integrations**.

From the list, select the link in the **Source Instance** column. The **Integration Instance Parameters** tab displays a list of parameters. Alternatively, select the **Vulnerability Integrations** tab for a schedule, REST details, integration details, data sources, and integration run information.

## Data retrieval settings and filters for the MS TVM integrations in your ServiceNow AI Platform instance

- **vi\_size\_limit**

Number of vulnerable item records to include in the result set from the MS TVM Machine Vulnerabilities integration. This setting must be in the int32 format. The default value is 2,000.

- **vulnerabilities\_size\_limit**

Number of vulnerability records to include in the result set from the MS TVM Vulnerability \(CVE\) integration. This setting must be in the int32 format. The default value is 2,000.

- **recommendations\_size\_limit**

Number of vulnerability records to include in the result set from the MS TVM Recommendations Integration. This setting must be in the int32 format. The default value is 2,000.

- **asset\_size\_limit**

Number of vulnerability records to include in the result set from the MS TVM Machines integration. This setting must be in the int32 format. The default value is 2,000.

- **machine\_filter**

Filters the machines that are coming from MS TVM. This filter is applied to the MS TVM Machines integration. The default value brings in machines where `onBoardingStatus` is `onBoarded`.